How do I report spamBlocker false positives or false negatives?
A false positive email message is a legitimate message that spamBlocker incorrectly identifies as spam. A false negative email message is a spam message that spamBlocker does not correctly identify as spam.
Fireware XTM OS on your device uses CYREN (formerly Commtouch), and you can send feedback directly to CYREN. You can also send feedback about a false positive for a solicited bulk email message. This is a message that spamBlocker identifies as bulk email when a user actually requested the email message.
Do not send a report about a false positive when the email is assigned to the Suspect category. Because this is not a permanent category, CYREN does not investigate error reports for suspected spam.
You must have access to the email message to send a false positive or false negative report to CYREN. You must also know the category (Confirmed Spam or Bulk) into which spamBlocker put the email message. To find the category, you must configure a spamBlocker action to add a subject tag and use a unique sequence of characters to add to the beginning of the email subject line.
To report a false positive or false negative:
If you have many messages to send to CYREN, you can put them all into one Zip file. Do not put the Zip file into a Zip archive. The Zip file can be compressed to only one level for CYREN to analyze it automatically.
Report feedback about a confidential message
If you want to send a report to CYREN but you cannot send the initial email message because the information in the message is confidential, you can use the RefID record from the email header instead. The RefID record is the reference number for the transaction between the Firebox and the CYREN Detection Center.
spamBlocker adds an X-WatchGuard-Spam-ID header to each email. The header looks like this:
Instead of attaching the initial email, put the RefID record in the body of your email message. If you have more than one email message you want to send a report about, put each RefID record on a separate line.
To see email headers if you use Microsoft Outlook:
To see email headers if you use Microsoft Outlook Express: